high8.8
CVE-2021-41738
ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands.
Impact
ZeroShell 3.9.5 has a command injection vulnerability in /cgi-bin/kerbynet IP parameter, which may allow an authenticated attacker to execute system commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zeroshell | Zeroshell | Version 3.9.5 |